Privacy policy

Who’s responsible for your data

This site is the portfolio of Gytis Markevičius. The data controller is MB “Gytis Mark”, the company I operate through (company code 305487006, VAT LT100013936214, S. Nėries g. 11-17, Zarasai, LT-32121, Lithuania). For anything about your data, email hi@gytismark.com.

What I collect and why

When you email me: your name, email address and message, so I can reply. Legal basis: legitimate interest.

When you book a call: the name, email and any notes you enter on my Cal.com booking page, so I can schedule and run the call. The booking is added to my calendar. Legal basis: legitimate interest and steps you ask for before a possible contract.

When you ask the AI assistant a question: the text of your question and the page you’re on are sent to a small service I run on Cloudflare, which passes them to Anthropic’s API to write the answer. I don’t keep a log of the questions. To stop abuse, the service keeps a daily question counter linked to your IP address, which is deleted automatically after two days. Please don’t type personal or confidential information into the assistant. Legal basis: legitimate interest (answering your question and keeping the service fair).

When you browse the site: with your consent through the cookie banner, analytics and marketing tools record how the site is used, such as pages viewed, clicks and scrolling. Legal basis: consent, which you can withdraw at any time.

If we work together: the details needed for the contract or employment, such as your name, company and the information you share during the work. Legal basis: contract.

If you subscribed to my newsletter: your name and email address, to send you updates. Legal basis: consent. You can unsubscribe from any email or by writing to me.

This site isn’t meant for anyone under 16.

How long I keep it

Emails: 3 years from our last contact. Call bookings that don’t lead to work: 12 months. Contract or employment data: for the length of the work plus 3 years. Newsletter: until you unsubscribe. AI assistant: I don’t store question text, and the rate-limit counter is deleted after two days. Hotjar recordings: up to 365 days. Providers listed below may keep data for their own periods, as set out in their policies.

Who helps me process it

I don’t sell or rent your data. I share it only with these providers, who process it for me:

Webflow (hosts this website). Cloudflare (runs the AI assistant service). Anthropic (the Claude AI model that writes the assistant’s answers). Cal.com (call booking page). Google (calendar, fonts and, where enabled, Google Analytics 4). Hotjar Limited, Malta (session recordings and heatmaps). LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag for ad measurement). CookieYes (the cookie consent banner).

Each provider’s privacy policy is on its own website. I may also disclose data if the law requires it or to protect my legal rights.

Transfers outside the EU

Several of these providers are based in, or move data to, the United States. Where data leaves the EU/EEA, it’s protected by safeguards such as the European Commission’s Standard Contractual Clauses. Email me if you’d like details.

Cookies and browser storage

Essential: needed for the site to work and to remember your cookie choice. These can’t be switched off.

Preferences: your light or dark theme is saved in your browser’s local storage, and a session flag stops the loading screen from showing twice. Neither is sent to me.

Analytics and marketing: Hotjar, Google Analytics and the LinkedIn Insight Tag. These are only meant to run after you accept them in the cookie banner. You can change your choice in the banner at any time, or clear cookies in your browser.

Your rights

Under the GDPR you can ask to see the data I hold about you, correct it, delete it, limit or object to how I use it, get a copy in a machine-readable format, and withdraw consent at any time. Email hi@gytismark.com and I’ll reply within 30 days.

You can also complain to the Lithuanian supervisory authority, the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): vdai.lrv.lt, ada@vdai.lrv.lt.

Security

The site runs over HTTPS, and the AI service keeps its API key on the server, never in your browser. No system is completely secure, but I take reasonable steps to protect your data.

Changes

I’ll update this policy when the site or the tools behind it change. The date at the top shows the current version.

Contact

hi@gytismark.com. MB “Gytis Mark”, S. Nėries g. 11-17, Zarasai, LT-32121, Lithuania.